Lucene search
+L

98353 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•11 views

CVE-2026-47496: Out-of-bounds Write

NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of privileges, data...

7.3CVSS5.8AI score0.00117EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•9 views

AlmaLinux 9.2 [TuxCare] Security Update: coreutils / coreutils-common / coreutils-single (ALMALINUX9.2:CLSA-2026:1788268556)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788268556 advisory. - GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing...

6.1CVSS6.2AI score0.00186EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•9 views

CentOS Linux 7 [TuxCare] Security Update: e2fsprogs / e2fsprogs-devel / e2fsprogs-libs / e2fsprogs-static / etc (CENTOS7:CLSA-2024:1711476689)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1711476689 advisory. - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code...

7.8CVSS7.1AI score0.01393EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•10 views

PT-2026-103500

Name of the Vulnerable Software and Affected Versions yii2-starter-kit versions prior to 4.2.0 Description The software exposes the Yii debug and Gii modules to all IP addresses by setting the allowedIPs variable to '' in the default development configuration. Unauthenticated remote attackers can...

9.3CVSS5.8AI score0.00397EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•5 views

PT-2026-103357

🚨 CVE-2026-47498 NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor GSP plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC message. A successful exploit of this vulnerability might lead to code execution, escalation of privileges...

7.8CVSS5.9AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•11 views

PT-2026-103355

🚨 CVE-2026-47496 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of...

7.3CVSS5.8AI score0.00117EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•9 views

PT-2026-103344

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows a user to trigger an integer overflow. This condition can lead to an out-of-bounds write to GPU...

7.8CVSS5.8AI score0.00146EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•8 views

PT-2026-103423

NVIDIA GPU Display Driver for Windows contains a vulnerability in the display driver DIAG escape handler where a local unprivileged attacker may cause an integer overflow and out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, and code execution...

7.8CVSS6.2AI score0.00134EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•9 views

PT-2026-103600

Name of the Vulnerable Software and Affected Versions modelscope Agentscope versions 1.0.0 through 1.0.18 Description A path traversal issue exists in the write text file function. Path traversal is a flaw that allows an attacker to access or manipulate files and directories outside the intended...

8.1CVSS5.7AI score0.00316EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/30 12:00 a.m.•34 views

CVE-2026-51862

DB-GPT version 0.8.0 is vulnerable to a directory traversal issue within the skill_upload function located in packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:40. This flaw allows a remote attacker to bypass intended workspace or storage boundaries to write files in unauthorize...

9.1CVSS5.9AI score0.00735EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•12 views

PT-2026-103397

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows an attacker to perform an out-of-bounds write, which occurs when data is written outside the intende...

7.8CVSS5.8AI score0.00182EPSS
SaveExploits0References92
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•10 views

PT-2026-103556

Name of the Vulnerable Software and Affected Versions Kiteworks appliance affected versions not specified Description A setup interface fails to properly confine user-supplied file paths to the intended directory. This allows an unauthenticated attacker with network access to the interface to wri...

7.4CVSS5.7AI score0.00991EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•10 views

CVE-2026-102123: Improper Limitation of a Pathname to a Restricted Directory

A Kiteworks appliance setup interface did not confine a user-supplied file path to its intended directory, which could allow an unauthenticated attacker to write a file to any location writable by the affected service account, potentially compromising the integrity of the appliance or rendering i...

7.4CVSS5.9AI score0.00991EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•8 views

PT-2026-103527

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway versions prior to 9.5.0 Description A path traversal weakness exists in an administrative import function. This flaw allows an authenticated administrator to write files to arbitrary locations on the server,...

7.2CVSS6.3AI score0.01547EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•7 views

CVE-2026-47541: Out-of-bounds Write

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

7.8CVSS5.8AI score0.00127EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•5 views

PT-2026-103354

🚨 CVE-2026-47495 NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, informati...

7.8CVSS5.8AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•7 views

PT-2026-103061

An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...

8.8CVSS8.3AI score0.00344EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/30 12:00 a.m.•8 views

CVE-2026-51862

DB-GPT 0.8.0 contains directory traversal in skillupload packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py:40. A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary...

5.9AI score0.00735EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•8 views

PT-2026-103576

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An unauthenticated attacker can write a file containing arbitrary content to the appliance filesystem. This is possible because an administrative upload handler...

7.5CVSS5.8AI score0.00322EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•6 views

PT-2026-103345

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows a user to trigger an out-of-bounds write, which occurs when data is written outside the boundaries o...

7.8CVSS5.8AI score0.00146EPSS
SaveExploits0References40
Rows per page
Query Builder